The Office of the Data Protection Commissioner (ODPC) has proposed new rules that could change how matatus, buses and ride-hailing apps handle passenger information.
The new guidelines are still in draft form, meaning Kenyans and players in the transport sector can give their views before anything is finalised.
If passed, the rules will affect many operators, including matatu saccos, bus companies, logistics firms and ride apps that collect customer details every day.
ODPC says transport companies must be clear on how they collect and use passenger data. This includes things like phone numbers, ID details and payment records, especially now that many people use cashless payments.
Under the proposal, passengers may also start getting clearer information on how their data is used before they share it. This is likely to affect systems like mobile booking and digital fare payments.
The rules could also touch companies that store data outside Kenya, especially those using online systems or apps.
Transport companies may also be required to appoint someone in charge of data protection to make sure they follow the law. This could be a challenge for smaller matatu saccos that may not have enough resources.
The intention is to ensure that the sector complies with the requirements of the Data Protection Act of 2019 as transport services become more digital.
Currently, most transport companies utilize applications, digital tickets, and even online payments to make transactions much easier. However, very little has been done to regulate the way in which passenger data is protected.
According to ODPC, the regulations will be useful in ensuring the safety of commuter data.
It will also be difficult for some actors in the sector to support the move as it may prove costly to implement the measures.
In light of the above, the proposal is currently open for consultation, and all citizens can air their concerns regarding the matter.
